[meta-virtualization][PATCH] kubernetes: set CVE_VERSION explicitly

[meta-virtualization][PATCH] kubernetes: set CVE_VERSION explicitly

[Qi.Chen]

From: Chen Qi <Qi.Chen@windriver.com>

The CVE_VERSION defaults to PV, but in NVD database, there's no
prefixing 'v' in database. So set CVE_VERSION explicitly for better
CVE scanning.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
---
 recipes-containers/kubernetes/kubernetes_git.bb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/recipes-containers/kubernetes/kubernetes_git.bb b/recipes-containers/kubernetes/kubernetes_git.bb
index 8b7c9e0..fefb2c1 100644
--- a/recipes-containers/kubernetes/kubernetes_git.bb
+++ b/recipes-containers/kubernetes/kubernetes_git.bb
@@ -6,6 +6,7 @@ maintenance, and scaling of applications. \
 "
 
 PV = "v1.27.1+git${SRCREV_kubernetes}"
+CVE_VERSION = "1.27.1"
 SRCREV_kubernetes = "2555e0f90e80a13628f47eca5cde34decc89babb"
 SRCREV_kubernetes-release = "21382abdbfa8e6a43fd417306fa649cb651cc06e"
 PE = "1"
-- 
2.34.1

Re: [meta-virtualization][PATCH] kubernetes: set CVE_VERSION explicitly

[Bruce Ashfield]

We could also do this programatically via a simple
inline python, that way it won't be missed during
uprev's.

I'll take care of that shortly, as I'm upreving
packages at the moment.

Bruce

In message: [meta-virtualization][PATCH] kubernetes: set CVE_VERSION explicitly
on 24/07/2023 Chen Qi via lists.yoctoproject.org wrote:

> From: Chen Qi <Qi.Chen@windriver.com>
> 
> The CVE_VERSION defaults to PV, but in NVD database, there's no
> prefixing 'v' in database. So set CVE_VERSION explicitly for better
> CVE scanning.
> 
> Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
> ---
>  recipes-containers/kubernetes/kubernetes_git.bb | 1 +
>  1 file changed, 1 insertion(+)
> 
> diff --git a/recipes-containers/kubernetes/kubernetes_git.bb b/recipes-containers/kubernetes/kubernetes_git.bb
> index 8b7c9e0..fefb2c1 100644
> --- a/recipes-containers/kubernetes/kubernetes_git.bb
> +++ b/recipes-containers/kubernetes/kubernetes_git.bb
> @@ -6,6 +6,7 @@ maintenance, and scaling of applications. \
>  "
>  
>  PV = "v1.27.1+git${SRCREV_kubernetes}"
> +CVE_VERSION = "1.27.1"
>  SRCREV_kubernetes = "2555e0f90e80a13628f47eca5cde34decc89babb"
>  SRCREV_kubernetes-release = "21382abdbfa8e6a43fd417306fa649cb651cc06e"
>  PE = "1"
> -- 
> 2.34.1
> 

> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#8130): https://lists.yoctoproject.org/g/meta-virtualization/message/8130
> Mute This Topic: https://lists.yoctoproject.org/mt/100322950/1050810
> Group Owner: meta-virtualization+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub [bruce.ashfield@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>